Computer Forensics Software

SAFE Block 1.0 ForensicSoft Inc 

SAFE Block is a software-based write blocker computer forensics tool for the Windows 2000/XP Operating Systems. SAFE Block facilitates the quick and safe acquisition and/or analysis of evidence on any disk or flash storage media attached directly to your forensic workstation. It has a simple Windows GUI interface that allows the user the ability . Free download of SAFE Block 1.0, size 2.16 Mb.


   
 

Thumbs.db Viewer 3.6 Janusware Ltd. 

Thumbs.db Viewer was written to give the computer user tools to reconstruct Thumbs.db, ehthumbs.db, thumbcache_*.db (Windows Vista,Windows 7) and iconcache_*.db (Windows 8/10) database records.
Thumbs.db is a hidden system file generated automatically by Windows when you view the contents of a folder in "Thumbnail" or . Free download of Thumbs.db Viewer 3.6, size 5.66 Mb.

OSForensics 1.0.1003 PassMark Software 

OSForensics is a new digital investigation tool which lets you extract forensic data or uncover hidden information from computers. OSForensics has a number of unique features which make the discovery of relevant forensic data even faster, such as high-performance deep file searching and indexing, e-mail and e-mail archive searching and the ability . Free download of OSForensics 1.0.1003, size 37.04 Mb.

eCapture Optimizer 2.0 CheetahDocs 

eCapture Optimizer cleans up your SQL Databases after running several eDiscovery projects. This utility should be ran every once in a while, when you detect that IPRO eCapture is running slowly. To utilize this utility you must a licensed copy of IPRO eCapture Version 3 - 5. CheetahDocs is litigation support provider specializing in electronic . Freeware download of eCapture Optimizer 2.0, size 411.65 Kb.

VidReport 1 2 Sanderson Forensics 

VidReport is a tool for the processing and reporting of video files (AVI's, MOV's etc.)
VidReport can now be called directly by C4P/C4All to allow the categorisation of movies.
C4M Frames (Categoriser for Movies) calls VidReport directly, creating up to 4 processes per CPU (that’s 32 movies at a time on a 2 CPU quad . Free download of VidReport 1 2, size 7.63 Mb.

WebCase 1.0 Vere Software, Inc. 

WebCase was designed by experienced law enforcement professionals to help you collect Internet information in a usable, evidentiary, reportable manner. Built to manage the cases you initiate online, it was designed specifically to:
- Simplify the online evidence collection process.
- Aid the investigator to preserve online evidence.

ProDiscover Basic 7.0.0.3 Technology Pathways LLC 

ProDiscover Basic edition is the free member of the ProDiscover family for hard disk security examination. It may not be as comprehensive as the other two products in the family, but it will give you an idea of the great potential these suite of products have. Meeting the criteria of the National Institute of Standards' Disk Imaging Tool . Freeware download of ProDiscover Basic 7.0.0.3, size 79.39 Mb.

Mount Image Pro 4.5.9.853 GetData 2011 

Mount Image Pro is a computer forensics tool for computer forensics investigations. It enables the mounting of: EnCase .E01, .L01,AccessData FTK .E01, .AD1, Unix/Linux DD and RAW images,Forensic File Format .AFF,SMART,ISO (CD and DVD images), VMWare, ProDiscover, Microsoft VHD,Apple DMG image files as a drive letter under the Windows file system. . Free download of Mount Image Pro 4.5.9.853, size 12.67 Mb.

CacheBack 2. 7. 2004 Digital Investigations Group 

Rebuild cached web pages and examine Internet histories for Internet Explorer. View cached web pages AND pictures in a single consolidated thumbnail gallery making it easy to zero in on artifacts of interest. Import pictures and movies directly from local hard disks using our GrabMedia data mining tool. Categorize, Group, Bookmark and/or Exclude . Free download of CacheBack 2. 7. 2004, size 33.41 Mb.

PmExplorer 1.0 Sanderson Forensics 

PmExplorer is a forensic software tool for the review and examination of PM files for Nokia mobile telephones. PM files can be obtained with third party hardware and software utilities such as SaraSoft and the SHU box.PmExplorer differs from current mobile phone tools in that it is designed to give the examiner unfettered access to the raw data. . Free download of PmExplorer 1.0, size 3.63 Mb.

OPC-5000E 5.0 Research Electronics Intl 

The OPC-5000E software combined with the USB port provides the ability to store and compare multiple Peak Traces from previous sweeps, adjacent rooms, and real-time OSCOR data. This high resolution data is easily manipulated for analysis.

The OPC-5000E brings significant updates including a high-speed USB port for PC connection, . Freeware download of OPC-5000E 5.0, size 15.44 Mb.

LinkAlyzer 1. 2. 2002 Sanderson Forensics 

LinkAlyzer is a forensic tool that decodes and displays the content of multiple link files (Windows Shortcuts) at the same time. LinkAlyzer allows you to carve link files from disk/volume/file or encase image. LinkAlyzer Loads multiple link files into a grid and Displays internal dates. . Free download of LinkAlyzer 1. 2. 2002, size 4.89 Mb.

SkypeAlyzer 1.1.4.67 Sanderson Forensics 

Analyse Skype chat logs, contacts lists, SMS messages with SkypeAlyzer a forensics tool designed to work with both the old Skype database files – found in a series of .dbb files and the newer Skype database files (main.db). Open and view the contacts from a Skype database . Free download of SkypeAlyzer 1.1.4.67, size 5.33 Mb.

TALAN Data Viewer 1.0 Research Electronics International 

The NEW TALAN Telephone and Line Analyzer provides a complete integrated suite of tools to analyze, inspect, and test digital telephone lines (and other wiring) for taps and other eavesdropping devices.

The TALAN represents a new breakthrough in telephone line testing. There currently is no other product available with the same . Freeware download of TALAN Data Viewer 1.0, size 1.11 Mb.

Thumbs.db Viewer Pro 3.6 Janusware Ltd. 

Thumbs.db Viewer was written to give the computer user tools to reconstruct Thumbs.db, ehthumbs.db, thumbcache_*.db (Windows Vista,Windows 7) and iconcache_*.db (Windows 8/10) database records.
Thumbs.db is a hidden system file generated automatically by Windows when you view the contents of a folder in "Thumbnail" or . Free download of Thumbs.db Viewer Pro 3.6, size 8.04 Mb.